aws-sdk-cloudwatchlogs 1.141.0 → 1.143.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7e8a10a5c4d8f895f5f19f8f593dc6bbee2a37ca4ca53ba0772e8ea2edff0d17
-  data.tar.gz: 9ae34f8edf5d58641ce1a1c1cc65507312651891e4ab8258237c07fe1b044111
+  metadata.gz: 52aa15b343b893456e017d9a4c5513cd73e074e597903f5a9e9d4ca8cb9b8f24
+  data.tar.gz: 74644e711b2c8d2b04c5f5bd6dba0198c3ad57ffac70c5ab634b28d0411785d6
 SHA512:
-  metadata.gz: 847fa5d00d0ffa8ba5ccb9e03cf5da5de91a86ac6eb4f747d76786d651254191b50862d94f9ca7cb6844e6c856adca7793531340b41b2a059f1b0185fa495c23
-  data.tar.gz: 69f539032626e620974e406ba14f6d39922341729d02753d61bd0838ad9a611ace8ea871644d242be58cd7fdbb9483b66210cc6a601e8434f78b8eb2548af0d0
+  metadata.gz: 95b033b245fe9b1e858b65472bef0efa986677e7bc61bbfa6abb5e6d00ecaaf888ada45c0971cd6dc98ef3dc23d97e3559b1b8501f852fbfca0f1339070c82b3
+  data.tar.gz: 4e998cca3419f3a15400791a1673a794b78acc5632bbe54b66c039e7f001c92d346f4f59df1b468ce1c265b4b1fa482e028e636ab8d4a31b3e25f3c0ae306011

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.143.0 (2026-04-02)
+------------------
+
+* Feature - We are pleased to announce that our logs transformation csv processor now has a destination field, allowing you to specify under which parent node parsed columns be placed under.
+
+1.142.0 (2026-03-30)
+------------------
+
+* Feature - Adds Lookup Tables to CloudWatch Logs for log enrichment using CSV key-value data with KMS encryption support.
+
 1.141.0 (2026-03-26)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.141.0
+1.143.0

data/lib/aws-sdk-cloudwatchlogs/client.rb

@@ -1346,6 +1346,70 @@ module Aws::CloudWatchLogs
       req.send_request(options)
     end
 
+    # Creates a lookup table by uploading CSV data. You can use lookup
+    # tables to enrich log data in CloudWatch Logs Insights queries with
+    # reference data such as user details, application names, or error
+    # descriptions.
+    #
+    # The table name must be unique within your account and Region. The CSV
+    # content must include a header row with column names, use UTF-8
+    # encoding, and not exceed 10 MB.
+    #
+    # @option params [required, String] :lookup_table_name
+    #   The name of the lookup table. The name must be unique within your
+    #   account and Region. The name can contain only alphanumeric characters
+    #   and underscores, and can be up to 256 characters long.
+    #
+    # @option params [String] :description
+    #   A description of the lookup table. The description can be up to 1024
+    #   characters long.
+    #
+    # @option params [required, String] :table_body
+    #   The CSV content of the lookup table. The first row must be a header
+    #   row with column names. The content must use UTF-8 encoding and not
+    #   exceed 10 MB.
+    #
+    # @option params [String] :kms_key_id
+    #   The ARN of the KMS key to use to encrypt the lookup table data. If you
+    #   don't specify a key, the data is encrypted with an Amazon Web
+    #   Services-owned key.
+    #
+    # @option params [Hash<String,String>] :tags
+    #   A list of key-value pairs to associate with the lookup table. You can
+    #   associate as many as 50 tags with a lookup table. Tags can help you
+    #   organize and categorize your resources.
+    #
+    # @return [Types::CreateLookupTableResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::CreateLookupTableResponse#lookup_table_arn #lookup_table_arn} => String
+    #   * {Types::CreateLookupTableResponse#created_at #created_at} => Integer
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.create_lookup_table({
+    #     lookup_table_name: "LookupTableName", # required
+    #     description: "LookupTableDescription",
+    #     table_body: "TableBody", # required
+    #     kms_key_id: "KmsKeyId",
+    #     tags: {
+    #       "TagKey" => "TagValue",
+    #     },
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.lookup_table_arn #=> String
+    #   resp.created_at #=> Integer
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/CreateLookupTable AWS API Documentation
+    #
+    # @overload create_lookup_table(params = {})
+    # @param [Hash] params ({})
+    def create_lookup_table(params = {}, options = {})
+      req = build_request(:create_lookup_table, params)
+      req.send_request(options)
+    end
+
     # Creates a scheduled query that runs CloudWatch Logs Insights queries
     # at regular intervals. Scheduled queries enable proactive monitoring by
     # automatically executing queries to detect patterns and anomalies in
@@ -1864,6 +1928,32 @@ module Aws::CloudWatchLogs
       req.send_request(options)
     end
 
+    # Deletes a lookup table permanently. This operation cannot be undone.
+    #
+    # Queries that reference a deleted table will return an error. Before
+    # deleting a lookup table, review any saved queries or dashboards that
+    # may reference it.
+    #
+    # @option params [required, String] :lookup_table_arn
+    #   The ARN of the lookup table to delete.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_lookup_table({
+    #     lookup_table_arn: "Arn", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DeleteLookupTable AWS API Documentation
+    #
+    # @overload delete_lookup_table(params = {})
+    # @param [Hash] params ({})
+    def delete_lookup_table(params = {}, options = {})
+      req = build_request(:delete_lookup_table, params)
+      req.send_request(options)
+    end
+
     # Deletes the specified metric filter.
     #
     # @option params [required, String] :log_group_name
@@ -2993,6 +3083,59 @@ module Aws::CloudWatchLogs
       req.send_request(options)
     end
 
+    # Retrieves metadata about lookup tables in your account. You can
+    # optionally filter the results by table name prefix. Results are sorted
+    # by table name in ascending order.
+    #
+    # @option params [String] :lookup_table_name_prefix
+    #   A prefix to filter lookup tables by name. Only tables whose names
+    #   start with this prefix are returned. If you don't specify a prefix,
+    #   all tables in the account and Region are returned.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of lookup tables to return in the response. The
+    #   default value is 50 and the maximum value is 100.
+    #
+    # @option params [String] :next_token
+    #   The token for the next set of items to return. (You received this
+    #   token from a previous call.)
+    #
+    # @return [Types::DescribeLookupTablesResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DescribeLookupTablesResponse#lookup_tables #lookup_tables} => Array&lt;Types::LookupTable&gt;
+    #   * {Types::DescribeLookupTablesResponse#next_token #next_token} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.describe_lookup_tables({
+    #     lookup_table_name_prefix: "LookupTableName",
+    #     max_results: 1,
+    #     next_token: "NextToken",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.lookup_tables #=> Array
+    #   resp.lookup_tables[0].lookup_table_arn #=> String
+    #   resp.lookup_tables[0].lookup_table_name #=> String
+    #   resp.lookup_tables[0].description #=> String
+    #   resp.lookup_tables[0].table_fields #=> Array
+    #   resp.lookup_tables[0].table_fields[0] #=> String
+    #   resp.lookup_tables[0].records_count #=> Integer
+    #   resp.lookup_tables[0].size_bytes #=> Integer
+    #   resp.lookup_tables[0].last_updated_time #=> Integer
+    #   resp.lookup_tables[0].kms_key_id #=> String
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DescribeLookupTables AWS API Documentation
+    #
+    # @overload describe_lookup_tables(params = {})
+    # @param [Hash] params ({})
+    def describe_lookup_tables(params = {}, options = {})
+      req = build_request(:describe_lookup_tables, params)
+      req.send_request(options)
+    end
+
     # Lists the specified metric filters. You can list all of the metric
     # filters or filter the results by log name, prefix, metric name, or
     # metric namespace. The results are ASCII-sorted by filter name.
@@ -4425,6 +4568,46 @@ module Aws::CloudWatchLogs
       req.send_request(options)
     end
 
+    # Retrieves the full content of a lookup table, including the CSV data.
+    #
+    # @option params [required, String] :lookup_table_arn
+    #   The ARN of the lookup table to retrieve.
+    #
+    # @return [Types::GetLookupTableResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetLookupTableResponse#lookup_table_arn #lookup_table_arn} => String
+    #   * {Types::GetLookupTableResponse#lookup_table_name #lookup_table_name} => String
+    #   * {Types::GetLookupTableResponse#description #description} => String
+    #   * {Types::GetLookupTableResponse#table_body #table_body} => String
+    #   * {Types::GetLookupTableResponse#size_bytes #size_bytes} => Integer
+    #   * {Types::GetLookupTableResponse#last_updated_time #last_updated_time} => Integer
+    #   * {Types::GetLookupTableResponse#kms_key_id #kms_key_id} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_lookup_table({
+    #     lookup_table_arn: "Arn", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.lookup_table_arn #=> String
+    #   resp.lookup_table_name #=> String
+    #   resp.description #=> String
+    #   resp.table_body #=> String
+    #   resp.size_bytes #=> Integer
+    #   resp.last_updated_time #=> Integer
+    #   resp.kms_key_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/GetLookupTable AWS API Documentation
+    #
+    # @overload get_lookup_table(params = {})
+    # @param [Hash] params ({})
+    def get_lookup_table(params = {}, options = {})
+      req = build_request(:get_lookup_table, params)
+      req.send_request(options)
+    end
+
     # Returns the results from the specified query.
     #
     # Only the fields requested in the query are returned, along with a
@@ -4686,6 +4869,7 @@ module Aws::CloudWatchLogs
     #   resp.transformer_config[0].csv.columns #=> Array
     #   resp.transformer_config[0].csv.columns[0] #=> String
     #   resp.transformer_config[0].csv.source #=> String
+    #   resp.transformer_config[0].csv.destination #=> String
     #   resp.transformer_config[0].date_time_converter.source #=> String
     #   resp.transformer_config[0].date_time_converter.target #=> String
     #   resp.transformer_config[0].date_time_converter.target_format #=> String
@@ -6419,6 +6603,8 @@ module Aws::CloudWatchLogs
     #
     #   * For CloudFront, the valid value is `ACCESS_LOGS`.
     #
+    #   * For DevOps Agent, the valid value is `APPLICATION_LOGS`.
+    #
     #   * For Amazon CodeWhisperer, the valid value is `EVENT_LOGS`.
     #
     #   * For Elemental MediaPackage, the valid values are
@@ -7622,6 +7808,7 @@ module Aws::CloudWatchLogs
     #           delimiter: "Delimiter",
     #           columns: ["Column"],
     #           source: "Source",
+    #           destination: "DestinationField",
     #         },
     #         date_time_converter: {
     #           source: "Source", # required
@@ -8446,6 +8633,7 @@ module Aws::CloudWatchLogs
     #           delimiter: "Delimiter",
     #           columns: ["Column"],
     #           source: "Source",
+    #           destination: "DestinationField",
     #         },
     #         date_time_converter: {
     #           source: "Source", # required
@@ -8838,6 +9026,58 @@ module Aws::CloudWatchLogs
       req.send_request(options)
     end
 
+    # Updates an existing lookup table by replacing all of its CSV content.
+    # After the update completes, queries that use this table will use the
+    # new data.
+    #
+    # This is a full replacement operation. All existing content is replaced
+    # with the new CSV data.
+    #
+    # @option params [required, String] :lookup_table_arn
+    #   The ARN of the lookup table to update.
+    #
+    # @option params [String] :description
+    #   An updated description of the lookup table.
+    #
+    # @option params [required, String] :table_body
+    #   The new CSV content to replace the existing data. The first row must
+    #   be a header row with column names. The content must use UTF-8 encoding
+    #   and not exceed 10 MB.
+    #
+    # @option params [String] :kms_key_id
+    #   The ARN of the KMS key to use to encrypt the lookup table data. You
+    #   can use this parameter to add, update, or remove the KMS key. To
+    #   remove the KMS key and use an Amazon Web Services-owned key instead,
+    #   specify an empty string.
+    #
+    # @return [Types::UpdateLookupTableResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::UpdateLookupTableResponse#lookup_table_arn #lookup_table_arn} => String
+    #   * {Types::UpdateLookupTableResponse#last_updated_time #last_updated_time} => Integer
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.update_lookup_table({
+    #     lookup_table_arn: "Arn", # required
+    #     description: "LookupTableDescription",
+    #     table_body: "TableBody", # required
+    #     kms_key_id: "KmsKeyId",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.lookup_table_arn #=> String
+    #   resp.last_updated_time #=> Integer
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/UpdateLookupTable AWS API Documentation
+    #
+    # @overload update_lookup_table(params = {})
+    # @param [Hash] params ({})
+    def update_lookup_table(params = {}, options = {})
+      req = build_request(:update_lookup_table, params)
+      req.send_request(options)
+    end
+
     # Updates an existing scheduled query with new configuration. This
     # operation uses PUT semantics, allowing modification of query
     # parameters, schedule, and destinations.
@@ -8982,7 +9222,7 @@ module Aws::CloudWatchLogs
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-cloudwatchlogs'
-      context[:gem_version] = '1.141.0'
+      context[:gem_version] = '1.143.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cloudwatchlogs/client_api.rb

@@ -75,6 +75,8 @@ module Aws::CloudWatchLogs
     CreateLogAnomalyDetectorResponse = Shapes::StructureShape.new(name: 'CreateLogAnomalyDetectorResponse')
     CreateLogGroupRequest = Shapes::StructureShape.new(name: 'CreateLogGroupRequest')
     CreateLogStreamRequest = Shapes::StructureShape.new(name: 'CreateLogStreamRequest')
+    CreateLookupTableRequest = Shapes::StructureShape.new(name: 'CreateLookupTableRequest')
+    CreateLookupTableResponse = Shapes::StructureShape.new(name: 'CreateLookupTableResponse')
     CreateScheduledQueryRequest = Shapes::StructureShape.new(name: 'CreateScheduledQueryRequest')
     CreateScheduledQueryResponse = Shapes::StructureShape.new(name: 'CreateScheduledQueryResponse')
     DashboardViewerPrincipals = Shapes::ListShape.new(name: 'DashboardViewerPrincipals')
@@ -106,6 +108,7 @@ module Aws::CloudWatchLogs
     DeleteLogAnomalyDetectorRequest = Shapes::StructureShape.new(name: 'DeleteLogAnomalyDetectorRequest')
     DeleteLogGroupRequest = Shapes::StructureShape.new(name: 'DeleteLogGroupRequest')
     DeleteLogStreamRequest = Shapes::StructureShape.new(name: 'DeleteLogStreamRequest')
+    DeleteLookupTableRequest = Shapes::StructureShape.new(name: 'DeleteLookupTableRequest')
     DeleteMetricFilterRequest = Shapes::StructureShape.new(name: 'DeleteMetricFilterRequest')
     DeleteQueryDefinitionRequest = Shapes::StructureShape.new(name: 'DeleteQueryDefinitionRequest')
     DeleteQueryDefinitionResponse = Shapes::StructureShape.new(name: 'DeleteQueryDefinitionResponse')
@@ -163,6 +166,9 @@ module Aws::CloudWatchLogs
     DescribeLogGroupsResponse = Shapes::StructureShape.new(name: 'DescribeLogGroupsResponse')
     DescribeLogStreamsRequest = Shapes::StructureShape.new(name: 'DescribeLogStreamsRequest')
     DescribeLogStreamsResponse = Shapes::StructureShape.new(name: 'DescribeLogStreamsResponse')
+    DescribeLookupTablesMaxResults = Shapes::IntegerShape.new(name: 'DescribeLookupTablesMaxResults')
+    DescribeLookupTablesRequest = Shapes::StructureShape.new(name: 'DescribeLookupTablesRequest')
+    DescribeLookupTablesResponse = Shapes::StructureShape.new(name: 'DescribeLookupTablesResponse')
     DescribeMetricFiltersRequest = Shapes::StructureShape.new(name: 'DescribeMetricFiltersRequest')
     DescribeMetricFiltersResponse = Shapes::StructureShape.new(name: 'DescribeMetricFiltersResponse')
     DescribeQueriesMaxResults = Shapes::IntegerShape.new(name: 'DescribeQueriesMaxResults')
@@ -270,6 +276,8 @@ module Aws::CloudWatchLogs
     GetLogObjectResponseStream = Shapes::StructureShape.new(name: 'GetLogObjectResponseStream')
     GetLogRecordRequest = Shapes::StructureShape.new(name: 'GetLogRecordRequest')
     GetLogRecordResponse = Shapes::StructureShape.new(name: 'GetLogRecordResponse')
+    GetLookupTableRequest = Shapes::StructureShape.new(name: 'GetLookupTableRequest')
+    GetLookupTableResponse = Shapes::StructureShape.new(name: 'GetLookupTableResponse')
     GetQueryResultsRequest = Shapes::StructureShape.new(name: 'GetQueryResultsRequest')
     GetQueryResultsResponse = Shapes::StructureShape.new(name: 'GetQueryResultsResponse')
     GetScheduledQueryHistoryMaxResults = Shapes::IntegerShape.new(name: 'GetScheduledQueryHistoryMaxResults')
@@ -394,6 +402,10 @@ module Aws::CloudWatchLogs
     LogStreams = Shapes::ListShape.new(name: 'LogStreams')
     LogType = Shapes::StringShape.new(name: 'LogType')
     LogTypes = Shapes::ListShape.new(name: 'LogTypes')
+    LookupTable = Shapes::StructureShape.new(name: 'LookupTable')
+    LookupTableDescription = Shapes::StringShape.new(name: 'LookupTableDescription')
+    LookupTableName = Shapes::StringShape.new(name: 'LookupTableName')
+    LookupTables = Shapes::ListShape.new(name: 'LookupTables')
     LowerCaseString = Shapes::StructureShape.new(name: 'LowerCaseString')
     LowerCaseStringWithKeys = Shapes::ListShape.new(name: 'LowerCaseStringWithKeys')
     MalformedQueryException = Shapes::StructureShape.new(name: 'MalformedQueryException')
@@ -517,6 +529,7 @@ module Aws::CloudWatchLogs
     QuoteCharacter = Shapes::StringShape.new(name: 'QuoteCharacter')
     RecordField = Shapes::StructureShape.new(name: 'RecordField')
     RecordFields = Shapes::ListShape.new(name: 'RecordFields')
+    RecordsCount = Shapes::IntegerShape.new(name: 'RecordsCount')
     RejectedEntityInfo = Shapes::StructureShape.new(name: 'RejectedEntityInfo')
     RejectedLogEventsInfo = Shapes::StructureShape.new(name: 'RejectedLogEventsInfo')
     RenameKeyEntries = Shapes::ListShape.new(name: 'RenameKeyEntries')
@@ -599,6 +612,8 @@ module Aws::CloudWatchLogs
     SuppressionType = Shapes::StringShape.new(name: 'SuppressionType')
     SuppressionUnit = Shapes::StringShape.new(name: 'SuppressionUnit')
     SystemField = Shapes::StringShape.new(name: 'SystemField')
+    TableBody = Shapes::StringShape.new(name: 'TableBody')
+    TableFields = Shapes::ListShape.new(name: 'TableFields')
     TagKey = Shapes::StringShape.new(name: 'TagKey')
     TagKeyList = Shapes::ListShape.new(name: 'TagKeyList')
     TagList = Shapes::ListShape.new(name: 'TagList')
@@ -642,6 +657,8 @@ module Aws::CloudWatchLogs
     UpdateDeliveryConfigurationRequest = Shapes::StructureShape.new(name: 'UpdateDeliveryConfigurationRequest')
     UpdateDeliveryConfigurationResponse = Shapes::StructureShape.new(name: 'UpdateDeliveryConfigurationResponse')
     UpdateLogAnomalyDetectorRequest = Shapes::StructureShape.new(name: 'UpdateLogAnomalyDetectorRequest')
+    UpdateLookupTableRequest = Shapes::StructureShape.new(name: 'UpdateLookupTableRequest')
+    UpdateLookupTableResponse = Shapes::StructureShape.new(name: 'UpdateLookupTableResponse')
     UpdateScheduledQueryRequest = Shapes::StructureShape.new(name: 'UpdateScheduledQueryRequest')
     UpdateScheduledQueryResponse = Shapes::StructureShape.new(name: 'UpdateScheduledQueryResponse')
     UpperCaseString = Shapes::StructureShape.new(name: 'UpperCaseString')
@@ -739,6 +756,7 @@ module Aws::CloudWatchLogs
     CSV.add_member(:delimiter, Shapes::ShapeRef.new(shape: Delimiter, location_name: "delimiter"))
     CSV.add_member(:columns, Shapes::ShapeRef.new(shape: Columns, location_name: "columns"))
     CSV.add_member(:source, Shapes::ShapeRef.new(shape: Source, location_name: "source"))
+    CSV.add_member(:destination, Shapes::ShapeRef.new(shape: DestinationField, location_name: "destination"))
     CSV.struct_class = Types::CSV
 
     CancelExportTaskRequest.add_member(:task_id, Shapes::ShapeRef.new(shape: ExportTaskId, required: true, location_name: "taskId"))
@@ -843,6 +861,17 @@ module Aws::CloudWatchLogs
     CreateLogStreamRequest.add_member(:log_stream_name, Shapes::ShapeRef.new(shape: LogStreamName, required: true, location_name: "logStreamName"))
     CreateLogStreamRequest.struct_class = Types::CreateLogStreamRequest
 
+    CreateLookupTableRequest.add_member(:lookup_table_name, Shapes::ShapeRef.new(shape: LookupTableName, required: true, location_name: "lookupTableName"))
+    CreateLookupTableRequest.add_member(:description, Shapes::ShapeRef.new(shape: LookupTableDescription, location_name: "description"))
+    CreateLookupTableRequest.add_member(:table_body, Shapes::ShapeRef.new(shape: TableBody, required: true, location_name: "tableBody"))
+    CreateLookupTableRequest.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: KmsKeyId, location_name: "kmsKeyId"))
+    CreateLookupTableRequest.add_member(:tags, Shapes::ShapeRef.new(shape: Tags, location_name: "tags"))
+    CreateLookupTableRequest.struct_class = Types::CreateLookupTableRequest
+
+    CreateLookupTableResponse.add_member(:lookup_table_arn, Shapes::ShapeRef.new(shape: Arn, location_name: "lookupTableArn"))
+    CreateLookupTableResponse.add_member(:created_at, Shapes::ShapeRef.new(shape: Timestamp, location_name: "createdAt"))
+    CreateLookupTableResponse.struct_class = Types::CreateLookupTableResponse
+
     CreateScheduledQueryRequest.add_member(:name, Shapes::ShapeRef.new(shape: ScheduledQueryName, required: true, location_name: "name"))
     CreateScheduledQueryRequest.add_member(:description, Shapes::ShapeRef.new(shape: ScheduledQueryDescription, location_name: "description"))
     CreateScheduledQueryRequest.add_member(:query_language, Shapes::ShapeRef.new(shape: QueryLanguage, required: true, location_name: "queryLanguage"))
@@ -933,6 +962,9 @@ module Aws::CloudWatchLogs
     DeleteLogStreamRequest.add_member(:log_stream_name, Shapes::ShapeRef.new(shape: LogStreamName, required: true, location_name: "logStreamName"))
     DeleteLogStreamRequest.struct_class = Types::DeleteLogStreamRequest
 
+    DeleteLookupTableRequest.add_member(:lookup_table_arn, Shapes::ShapeRef.new(shape: Arn, required: true, location_name: "lookupTableArn"))
+    DeleteLookupTableRequest.struct_class = Types::DeleteLookupTableRequest
+
     DeleteMetricFilterRequest.add_member(:log_group_name, Shapes::ShapeRef.new(shape: LogGroupName, required: true, location_name: "logGroupName"))
     DeleteMetricFilterRequest.add_member(:filter_name, Shapes::ShapeRef.new(shape: FilterName, required: true, location_name: "filterName"))
     DeleteMetricFilterRequest.struct_class = Types::DeleteMetricFilterRequest
@@ -1140,6 +1172,15 @@ module Aws::CloudWatchLogs
     DescribeLogStreamsResponse.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "nextToken"))
     DescribeLogStreamsResponse.struct_class = Types::DescribeLogStreamsResponse
 
+    DescribeLookupTablesRequest.add_member(:lookup_table_name_prefix, Shapes::ShapeRef.new(shape: LookupTableName, location_name: "lookupTableNamePrefix"))
+    DescribeLookupTablesRequest.add_member(:max_results, Shapes::ShapeRef.new(shape: DescribeLookupTablesMaxResults, location_name: "maxResults"))
+    DescribeLookupTablesRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "nextToken"))
+    DescribeLookupTablesRequest.struct_class = Types::DescribeLookupTablesRequest
+
+    DescribeLookupTablesResponse.add_member(:lookup_tables, Shapes::ShapeRef.new(shape: LookupTables, location_name: "lookupTables"))
+    DescribeLookupTablesResponse.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "nextToken"))
+    DescribeLookupTablesResponse.struct_class = Types::DescribeLookupTablesResponse
+
     DescribeMetricFiltersRequest.add_member(:log_group_name, Shapes::ShapeRef.new(shape: LogGroupName, location_name: "logGroupName"))
     DescribeMetricFiltersRequest.add_member(:filter_name_prefix, Shapes::ShapeRef.new(shape: FilterName, location_name: "filterNamePrefix"))
     DescribeMetricFiltersRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "nextToken"))
@@ -1406,6 +1447,18 @@ module Aws::CloudWatchLogs
     GetLogRecordResponse.add_member(:log_record, Shapes::ShapeRef.new(shape: LogRecord, location_name: "logRecord"))
     GetLogRecordResponse.struct_class = Types::GetLogRecordResponse
 
+    GetLookupTableRequest.add_member(:lookup_table_arn, Shapes::ShapeRef.new(shape: Arn, required: true, location_name: "lookupTableArn"))
+    GetLookupTableRequest.struct_class = Types::GetLookupTableRequest
+
+    GetLookupTableResponse.add_member(:lookup_table_arn, Shapes::ShapeRef.new(shape: Arn, location_name: "lookupTableArn"))
+    GetLookupTableResponse.add_member(:lookup_table_name, Shapes::ShapeRef.new(shape: LookupTableName, location_name: "lookupTableName"))
+    GetLookupTableResponse.add_member(:description, Shapes::ShapeRef.new(shape: LookupTableDescription, location_name: "description"))
+    GetLookupTableResponse.add_member(:table_body, Shapes::ShapeRef.new(shape: TableBody, location_name: "tableBody"))
+    GetLookupTableResponse.add_member(:size_bytes, Shapes::ShapeRef.new(shape: StoredBytes, location_name: "sizeBytes"))
+    GetLookupTableResponse.add_member(:last_updated_time, Shapes::ShapeRef.new(shape: Timestamp, location_name: "lastUpdatedTime"))
+    GetLookupTableResponse.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: KmsKeyId, location_name: "kmsKeyId"))
+    GetLookupTableResponse.struct_class = Types::GetLookupTableResponse
+
     GetQueryResultsRequest.add_member(:query_id, Shapes::ShapeRef.new(shape: QueryId, required: true, location_name: "queryId"))
     GetQueryResultsRequest.struct_class = Types::GetQueryResultsRequest
 
@@ -1746,6 +1799,18 @@ module Aws::CloudWatchLogs
 
     LogTypes.member = Shapes::ShapeRef.new(shape: LogType)
 
+    LookupTable.add_member(:lookup_table_arn, Shapes::ShapeRef.new(shape: Arn, location_name: "lookupTableArn"))
+    LookupTable.add_member(:lookup_table_name, Shapes::ShapeRef.new(shape: LookupTableName, location_name: "lookupTableName"))
+    LookupTable.add_member(:description, Shapes::ShapeRef.new(shape: LookupTableDescription, location_name: "description"))
+    LookupTable.add_member(:table_fields, Shapes::ShapeRef.new(shape: TableFields, location_name: "tableFields"))
+    LookupTable.add_member(:records_count, Shapes::ShapeRef.new(shape: RecordsCount, location_name: "recordsCount"))
+    LookupTable.add_member(:size_bytes, Shapes::ShapeRef.new(shape: StoredBytes, location_name: "sizeBytes"))
+    LookupTable.add_member(:last_updated_time, Shapes::ShapeRef.new(shape: Timestamp, location_name: "lastUpdatedTime"))
+    LookupTable.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: KmsKeyId, location_name: "kmsKeyId"))
+    LookupTable.struct_class = Types::LookupTable
+
+    LookupTables.member = Shapes::ShapeRef.new(shape: LookupTable)
+
     LowerCaseString.add_member(:with_keys, Shapes::ShapeRef.new(shape: LowerCaseStringWithKeys, required: true, location_name: "withKeys"))
     LowerCaseString.struct_class = Types::LowerCaseString
 
@@ -2313,6 +2378,8 @@ module Aws::CloudWatchLogs
     SuppressionPeriod.add_member(:suppression_unit, Shapes::ShapeRef.new(shape: SuppressionUnit, location_name: "suppressionUnit"))
     SuppressionPeriod.struct_class = Types::SuppressionPeriod
 
+    TableFields.member = Shapes::ShapeRef.new(shape: String)
+
     TagKeyList.member = Shapes::ShapeRef.new(shape: TagKey)
 
     TagList.member = Shapes::ShapeRef.new(shape: TagKey)
@@ -2413,6 +2480,16 @@ module Aws::CloudWatchLogs
     UpdateLogAnomalyDetectorRequest.add_member(:enabled, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "enabled"))
     UpdateLogAnomalyDetectorRequest.struct_class = Types::UpdateLogAnomalyDetectorRequest
 
+    UpdateLookupTableRequest.add_member(:lookup_table_arn, Shapes::ShapeRef.new(shape: Arn, required: true, location_name: "lookupTableArn"))
+    UpdateLookupTableRequest.add_member(:description, Shapes::ShapeRef.new(shape: LookupTableDescription, location_name: "description"))
+    UpdateLookupTableRequest.add_member(:table_body, Shapes::ShapeRef.new(shape: TableBody, required: true, location_name: "tableBody"))
+    UpdateLookupTableRequest.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: KmsKeyId, location_name: "kmsKeyId"))
+    UpdateLookupTableRequest.struct_class = Types::UpdateLookupTableRequest
+
+    UpdateLookupTableResponse.add_member(:lookup_table_arn, Shapes::ShapeRef.new(shape: Arn, location_name: "lookupTableArn"))
+    UpdateLookupTableResponse.add_member(:last_updated_time, Shapes::ShapeRef.new(shape: Timestamp, location_name: "lastUpdatedTime"))
+    UpdateLookupTableResponse.struct_class = Types::UpdateLookupTableResponse
+
     UpdateScheduledQueryRequest.add_member(:identifier, Shapes::ShapeRef.new(shape: ScheduledQueryIdentifier, required: true, location_name: "identifier"))
     UpdateScheduledQueryRequest.add_member(:description, Shapes::ShapeRef.new(shape: ScheduledQueryDescription, location_name: "description"))
     UpdateScheduledQueryRequest.add_member(:query_language, Shapes::ShapeRef.new(shape: QueryLanguage, required: true, location_name: "queryLanguage"))
@@ -2607,6 +2684,20 @@ module Aws::CloudWatchLogs
         o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
       end)
 
+      api.add_operation(:create_lookup_table, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "CreateLookupTable"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: CreateLookupTableRequest)
+        o.output = Shapes::ShapeRef.new(shape: CreateLookupTableResponse)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceAlreadyExistsException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: LimitExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
+      end)
+
       api.add_operation(:create_scheduled_query, Seahorse::Model::Operation.new.tap do |o|
         o.name = "CreateScheduledQuery"
         o.http_method = "POST"
@@ -2775,6 +2866,18 @@ module Aws::CloudWatchLogs
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
       end)
 
+      api.add_operation(:delete_lookup_table, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DeleteLookupTable"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: DeleteLookupTableRequest)
+        o.output = Shapes::ShapeRef.new(shape: Shapes::StructureShape.new(struct_class: Aws::EmptyStructure))
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
+      end)
+
       api.add_operation(:delete_metric_filter, Seahorse::Model::Operation.new.tap do |o|
         o.name = "DeleteMetricFilter"
         o.http_method = "POST"
@@ -3055,6 +3158,18 @@ module Aws::CloudWatchLogs
         )
       end)
 
+      api.add_operation(:describe_lookup_tables, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DescribeLookupTables"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: DescribeLookupTablesRequest)
+        o.output = Shapes::ShapeRef.new(shape: DescribeLookupTablesResponse)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
+      end)
+
       api.add_operation(:describe_metric_filters, Seahorse::Model::Operation.new.tap do |o|
         o.name = "DescribeMetricFilters"
         o.http_method = "POST"
@@ -3316,6 +3431,18 @@ module Aws::CloudWatchLogs
         o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
       end)
 
+      api.add_operation(:get_lookup_table, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetLookupTable"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: GetLookupTableRequest)
+        o.output = Shapes::ShapeRef.new(shape: GetLookupTableResponse)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
+      end)
+
       api.add_operation(:get_query_results, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetQueryResults"
         o.http_method = "POST"
@@ -3897,6 +4024,19 @@ module Aws::CloudWatchLogs
         o.errors << Shapes::ShapeRef.new(shape: OperationAbortedException)
       end)
 
+      api.add_operation(:update_lookup_table, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "UpdateLookupTable"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: UpdateLookupTableRequest)
+        o.output = Shapes::ShapeRef.new(shape: UpdateLookupTableResponse)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
+      end)
+
       api.add_operation(:update_scheduled_query, Seahorse::Model::Operation.new.tap do |o|
         o.name = "UpdateScheduledQuery"
         o.http_method = "POST"

data/lib/aws-sdk-cloudwatchlogs/types.rb

@@ -483,13 +483,20 @@ module Aws::CloudWatchLogs
     #   is processed.
     #   @return [String]
     #
+    # @!attribute [rw] destination
+    #   The path to the parent field to put transformed key value pairs
+    #   under. If you omit this value, the key value pairs will be placed
+    #   under the root node.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/CSV AWS API Documentation
     #
     class CSV < Struct.new(
       :quote_character,
       :delimiter,
       :columns,
-      :source)
+      :source,
+      :destination)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1119,6 +1126,65 @@ module Aws::CloudWatchLogs
       include Aws::Structure
     end
 
+    # @!attribute [rw] lookup_table_name
+    #   The name of the lookup table. The name must be unique within your
+    #   account and Region. The name can contain only alphanumeric
+    #   characters and underscores, and can be up to 256 characters long.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   A description of the lookup table. The description can be up to 1024
+    #   characters long.
+    #   @return [String]
+    #
+    # @!attribute [rw] table_body
+    #   The CSV content of the lookup table. The first row must be a header
+    #   row with column names. The content must use UTF-8 encoding and not
+    #   exceed 10 MB.
+    #   @return [String]
+    #
+    # @!attribute [rw] kms_key_id
+    #   The ARN of the KMS key to use to encrypt the lookup table data. If
+    #   you don't specify a key, the data is encrypted with an Amazon Web
+    #   Services-owned key.
+    #   @return [String]
+    #
+    # @!attribute [rw] tags
+    #   A list of key-value pairs to associate with the lookup table. You
+    #   can associate as many as 50 tags with a lookup table. Tags can help
+    #   you organize and categorize your resources.
+    #   @return [Hash<String,String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/CreateLookupTableRequest AWS API Documentation
+    #
+    class CreateLookupTableRequest < Struct.new(
+      :lookup_table_name,
+      :description,
+      :table_body,
+      :kms_key_id,
+      :tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] lookup_table_arn
+    #   The ARN of the lookup table that was created.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The time when the lookup table was created, expressed as the number
+    #   of milliseconds after `Jan 1, 1970 00:00:00 UTC`.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/CreateLookupTableResponse AWS API Documentation
+    #
+    class CreateLookupTableResponse < Struct.new(
+      :lookup_table_arn,
+      :created_at)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] name
     #   The name of the scheduled query. The name must be unique within your
     #   account and region. Valid characters are alphanumeric characters,
@@ -1569,6 +1635,18 @@ module Aws::CloudWatchLogs
       include Aws::Structure
     end
 
+    # @!attribute [rw] lookup_table_arn
+    #   The ARN of the lookup table to delete.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DeleteLookupTableRequest AWS API Documentation
+    #
+    class DeleteLookupTableRequest < Struct.new(
+      :lookup_table_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] log_group_name
     #   The name of the log group.
     #   @return [String]
@@ -2683,6 +2761,50 @@ module Aws::CloudWatchLogs
       include Aws::Structure
     end
 
+    # @!attribute [rw] lookup_table_name_prefix
+    #   A prefix to filter lookup tables by name. Only tables whose names
+    #   start with this prefix are returned. If you don't specify a prefix,
+    #   all tables in the account and Region are returned.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of lookup tables to return in the response. The
+    #   default value is 50 and the maximum value is 100.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   The token for the next set of items to return. (You received this
+    #   token from a previous call.)
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DescribeLookupTablesRequest AWS API Documentation
+    #
+    class DescribeLookupTablesRequest < Struct.new(
+      :lookup_table_name_prefix,
+      :max_results,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] lookup_tables
+    #   An array of structures, where each structure contains metadata about
+    #   one lookup table.
+    #   @return [Array<Types::LookupTable>]
+    #
+    # @!attribute [rw] next_token
+    #   The token to use when requesting the next set of items.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DescribeLookupTablesResponse AWS API Documentation
+    #
+    class DescribeLookupTablesResponse < Struct.new(
+      :lookup_tables,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] log_group_name
     #   The name of the log group.
     #   @return [String]
@@ -3997,6 +4119,62 @@ module Aws::CloudWatchLogs
       include Aws::Structure
     end
 
+    # @!attribute [rw] lookup_table_arn
+    #   The ARN of the lookup table to retrieve.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/GetLookupTableRequest AWS API Documentation
+    #
+    class GetLookupTableRequest < Struct.new(
+      :lookup_table_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] lookup_table_arn
+    #   The ARN of the lookup table.
+    #   @return [String]
+    #
+    # @!attribute [rw] lookup_table_name
+    #   The name of the lookup table.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   The description of the lookup table.
+    #   @return [String]
+    #
+    # @!attribute [rw] table_body
+    #   The full CSV content of the lookup table.
+    #   @return [String]
+    #
+    # @!attribute [rw] size_bytes
+    #   The size of the lookup table in bytes.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] last_updated_time
+    #   The time when the lookup table was last updated, expressed as the
+    #   number of milliseconds after `Jan 1, 1970 00:00:00 UTC`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] kms_key_id
+    #   The ARN of the KMS key used to encrypt the lookup table data, if
+    #   applicable.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/GetLookupTableResponse AWS API Documentation
+    #
+    class GetLookupTableResponse < Struct.new(
+      :lookup_table_arn,
+      :lookup_table_name,
+      :description,
+      :table_body,
+      :size_bytes,
+      :last_updated_time,
+      :kms_key_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] query_id
     #   The ID number of the query.
     #   @return [String]
@@ -5719,6 +5897,59 @@ module Aws::CloudWatchLogs
       include Aws::Structure
     end
 
+    # Contains metadata about a lookup table returned by
+    # `DescribeLookupTables`.
+    #
+    # @!attribute [rw] lookup_table_arn
+    #   The ARN of the lookup table.
+    #   @return [String]
+    #
+    # @!attribute [rw] lookup_table_name
+    #   The name of the lookup table.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   The description of the lookup table.
+    #   @return [String]
+    #
+    # @!attribute [rw] table_fields
+    #   The column headers from the first row of the CSV file.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] records_count
+    #   The number of data rows in the lookup table, excluding the header
+    #   row.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] size_bytes
+    #   The size of the lookup table in bytes.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] last_updated_time
+    #   The time when the lookup table was last updated, expressed as the
+    #   number of milliseconds after `Jan 1, 1970 00:00:00 UTC`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] kms_key_id
+    #   The ARN of the KMS key used to encrypt the lookup table data, if
+    #   applicable.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/LookupTable AWS API Documentation
+    #
+    class LookupTable < Struct.new(
+      :lookup_table_arn,
+      :lookup_table_name,
+      :description,
+      :table_fields,
+      :records_count,
+      :size_bytes,
+      :last_updated_time,
+      :kms_key_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # This processor converts a string to lowercase.
     #
     # For more information about this processor including examples, see [
@@ -7515,6 +7746,8 @@ module Aws::CloudWatchLogs
     #
     #   * For CloudFront, the valid value is `ACCESS_LOGS`.
     #
+    #   * For DevOps Agent, the valid value is `APPLICATION_LOGS`.
+    #
     #   * For Amazon CodeWhisperer, the valid value is `EVENT_LOGS`.
     #
     #   * For Elemental MediaPackage, the valid values are
@@ -8768,12 +9001,13 @@ module Aws::CloudWatchLogs
     #   @return [String]
     #
     # @!attribute [rw] owner_account_id
-    #   The AWS accountId for the bucket owning account.
+    #   The Amazon Web Services accountId for the bucket owning account.
     #   @return [String]
     #
     # @!attribute [rw] kms_key_id
     #   The Amazon Resource Name (ARN) of the KMS encryption key. Must
-    #   belong to the same AWS Region as the destination Amazon S3 bucket.
+    #   belong to the same Amazon Web Services Region as the destination
+    #   Amazon S3 bucket.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/S3Configuration AWS API Documentation
@@ -9894,6 +10128,56 @@ module Aws::CloudWatchLogs
       include Aws::Structure
     end
 
+    # @!attribute [rw] lookup_table_arn
+    #   The ARN of the lookup table to update.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   An updated description of the lookup table.
+    #   @return [String]
+    #
+    # @!attribute [rw] table_body
+    #   The new CSV content to replace the existing data. The first row must
+    #   be a header row with column names. The content must use UTF-8
+    #   encoding and not exceed 10 MB.
+    #   @return [String]
+    #
+    # @!attribute [rw] kms_key_id
+    #   The ARN of the KMS key to use to encrypt the lookup table data. You
+    #   can use this parameter to add, update, or remove the KMS key. To
+    #   remove the KMS key and use an Amazon Web Services-owned key instead,
+    #   specify an empty string.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/UpdateLookupTableRequest AWS API Documentation
+    #
+    class UpdateLookupTableRequest < Struct.new(
+      :lookup_table_arn,
+      :description,
+      :table_body,
+      :kms_key_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] lookup_table_arn
+    #   The ARN of the lookup table that was updated.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_updated_time
+    #   The time when the lookup table was last updated, expressed as the
+    #   number of milliseconds after `Jan 1, 1970 00:00:00 UTC`.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/UpdateLookupTableResponse AWS API Documentation
+    #
+    class UpdateLookupTableResponse < Struct.new(
+      :lookup_table_arn,
+      :last_updated_time)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] identifier
     #   The ARN or name of the scheduled query to update.
     #   @return [String]

data/lib/aws-sdk-cloudwatchlogs.rb

@@ -55,7 +55,7 @@ module Aws::CloudWatchLogs
   autoload :Endpoints, 'aws-sdk-cloudwatchlogs/endpoints'
   autoload :EventStreams, 'aws-sdk-cloudwatchlogs/event_streams'
 
-  GEM_VERSION = '1.141.0'
+  GEM_VERSION = '1.143.0'
 
 end
 

data/sig/client.rbs

@@ -208,6 +208,21 @@ module Aws
                              ) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
 
+      interface _CreateLookupTableResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::CreateLookupTableResponse]
+        def lookup_table_arn: () -> ::String
+        def created_at: () -> ::Integer
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CloudWatchLogs/Client.html#create_lookup_table-instance_method
+      def create_lookup_table: (
+                                 lookup_table_name: ::String,
+                                 ?description: ::String,
+                                 table_body: ::String,
+                                 ?kms_key_id: ::String,
+                                 ?tags: Hash[::String, ::String]
+                               ) -> _CreateLookupTableResponseSuccess
+                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateLookupTableResponseSuccess
+
       interface _CreateScheduledQueryResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::CreateScheduledQueryResponse]
         def scheduled_query_arn: () -> ::String
@@ -320,6 +335,12 @@ module Aws
                              ) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
 
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CloudWatchLogs/Client.html#delete_lookup_table-instance_method
+      def delete_lookup_table: (
+                                 lookup_table_arn: ::String
+                               ) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
+                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
+
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CloudWatchLogs/Client.html#delete_metric_filter-instance_method
       def delete_metric_filter: (
                                   log_group_name: ::String,
@@ -556,6 +577,19 @@ module Aws
                                 ) -> _DescribeLogStreamsResponseSuccess
                               | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeLogStreamsResponseSuccess
 
+      interface _DescribeLookupTablesResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DescribeLookupTablesResponse]
+        def lookup_tables: () -> ::Array[Types::LookupTable]
+        def next_token: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CloudWatchLogs/Client.html#describe_lookup_tables-instance_method
+      def describe_lookup_tables: (
+                                    ?lookup_table_name_prefix: ::String,
+                                    ?max_results: ::Integer,
+                                    ?next_token: ::String
+                                  ) -> _DescribeLookupTablesResponseSuccess
+                                | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeLookupTablesResponseSuccess
+
       interface _DescribeMetricFiltersResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::DescribeMetricFiltersResponse]
         def metric_filters: () -> ::Array[Types::MetricFilter]
@@ -816,6 +850,22 @@ module Aws
                           ) -> _GetLogRecordResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetLogRecordResponseSuccess
 
+      interface _GetLookupTableResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetLookupTableResponse]
+        def lookup_table_arn: () -> ::String
+        def lookup_table_name: () -> ::String
+        def description: () -> ::String
+        def table_body: () -> ::String
+        def size_bytes: () -> ::Integer
+        def last_updated_time: () -> ::Integer
+        def kms_key_id: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CloudWatchLogs/Client.html#get_lookup_table-instance_method
+      def get_lookup_table: (
+                              lookup_table_arn: ::String
+                            ) -> _GetLookupTableResponseSuccess
+                          | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetLookupTableResponseSuccess
+
       interface _GetQueryResultsResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetQueryResultsResponse]
         def query_language: () -> ("CWLI" | "SQL" | "PPL")
@@ -1295,7 +1345,8 @@ module Aws
                                    quote_character: ::String?,
                                    delimiter: ::String?,
                                    columns: Array[::String]?,
-                                   source: ::String?
+                                   source: ::String?,
+                                   destination: ::String?
                                  }?,
                                  date_time_converter: {
                                    source: ::String,
@@ -1507,7 +1558,8 @@ module Aws
                                     quote_character: ::String?,
                                     delimiter: ::String?,
                                     columns: Array[::String]?,
-                                    source: ::String?
+                                    source: ::String?,
+                                    destination: ::String?
                                   }?,
                                   date_time_converter: {
                                     source: ::String,
@@ -1678,6 +1730,20 @@ module Aws
                                        ) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
                                      | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
 
+      interface _UpdateLookupTableResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::UpdateLookupTableResponse]
+        def lookup_table_arn: () -> ::String
+        def last_updated_time: () -> ::Integer
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CloudWatchLogs/Client.html#update_lookup_table-instance_method
+      def update_lookup_table: (
+                                 lookup_table_arn: ::String,
+                                 ?description: ::String,
+                                 table_body: ::String,
+                                 ?kms_key_id: ::String
+                               ) -> _UpdateLookupTableResponseSuccess
+                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateLookupTableResponseSuccess
+
       interface _UpdateScheduledQueryResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::UpdateScheduledQueryResponse]
         def scheduled_query_arn: () -> ::String

data/sig/types.rbs

@@ -100,6 +100,7 @@ module Aws::CloudWatchLogs
       attr_accessor delimiter: ::String
       attr_accessor columns: ::Array[::String]
       attr_accessor source: ::String
+      attr_accessor destination: ::String
       SENSITIVE: []
     end
 
@@ -234,6 +235,21 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class CreateLookupTableRequest
+      attr_accessor lookup_table_name: ::String
+      attr_accessor description: ::String
+      attr_accessor table_body: ::String
+      attr_accessor kms_key_id: ::String
+      attr_accessor tags: ::Hash[::String, ::String]
+      SENSITIVE: []
+    end
+
+    class CreateLookupTableResponse
+      attr_accessor lookup_table_arn: ::String
+      attr_accessor created_at: ::Integer
+      SENSITIVE: []
+    end
+
     class CreateScheduledQueryRequest
       attr_accessor name: ::String
       attr_accessor description: ::String
@@ -360,6 +376,11 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class DeleteLookupTableRequest
+      attr_accessor lookup_table_arn: ::String
+      SENSITIVE: []
+    end
+
     class DeleteMetricFilterRequest
       attr_accessor log_group_name: ::String
       attr_accessor filter_name: ::String
@@ -628,6 +649,19 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class DescribeLookupTablesRequest
+      attr_accessor lookup_table_name_prefix: ::String
+      attr_accessor max_results: ::Integer
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
+    class DescribeLookupTablesResponse
+      attr_accessor lookup_tables: ::Array[Types::LookupTable]
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
     class DescribeMetricFiltersRequest
       attr_accessor log_group_name: ::String
       attr_accessor filter_name_prefix: ::String
@@ -958,6 +992,22 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class GetLookupTableRequest
+      attr_accessor lookup_table_arn: ::String
+      SENSITIVE: []
+    end
+
+    class GetLookupTableResponse
+      attr_accessor lookup_table_arn: ::String
+      attr_accessor lookup_table_name: ::String
+      attr_accessor description: ::String
+      attr_accessor table_body: ::String
+      attr_accessor size_bytes: ::Integer
+      attr_accessor last_updated_time: ::Integer
+      attr_accessor kms_key_id: ::String
+      SENSITIVE: []
+    end
+
     class GetQueryResultsRequest
       attr_accessor query_id: ::String
       SENSITIVE: []
@@ -1366,6 +1416,18 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class LookupTable
+      attr_accessor lookup_table_arn: ::String
+      attr_accessor lookup_table_name: ::String
+      attr_accessor description: ::String
+      attr_accessor table_fields: ::Array[::String]
+      attr_accessor records_count: ::Integer
+      attr_accessor size_bytes: ::Integer
+      attr_accessor last_updated_time: ::Integer
+      attr_accessor kms_key_id: ::String
+      SENSITIVE: []
+    end
+
     class LowerCaseString
       attr_accessor with_keys: ::Array[::String]
       SENSITIVE: []
@@ -2185,6 +2247,20 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class UpdateLookupTableRequest
+      attr_accessor lookup_table_arn: ::String
+      attr_accessor description: ::String
+      attr_accessor table_body: ::String
+      attr_accessor kms_key_id: ::String
+      SENSITIVE: []
+    end
+
+    class UpdateLookupTableResponse
+      attr_accessor lookup_table_arn: ::String
+      attr_accessor last_updated_time: ::Integer
+      SENSITIVE: []
+    end
+
     class UpdateScheduledQueryRequest
       attr_accessor identifier: ::String
       attr_accessor description: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cloudwatchlogs
 version: !ruby/object:Gem::Version
-  version: 1.141.0
+  version: 1.143.0
 platform: ruby
 authors:
 - Amazon Web Services